This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft File: YOLI9184WstLlKaNiZNRujR6MyM.mft (raw, json) Hash identifier: qW2rpuVn9naQ0eVeidlgrAko17W/ayY7UpAzoTiUGGs= Subject key identifier: B0:5B:D8:8C:04:66:B6:17:34:85:F5:67:15:47:80:75:A6:A5:53:81 Authority key identifier: 60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23 Certificate issuer: /CN=60e2c8f75f385acb4b94a68d899351ba347a3323 Certificate serial: 019B32D6F22BFEB30ED98D05C4039CB942A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft Manifest number: 1692 Signing time: Thu 18 Dec 2025 19:01:46 +0000 Manifest this update: Thu 18 Dec 2025 19:01:46 +0000 Manifest next update: Fri 19 Dec 2025 19:01:46 +0000 Files and hashes: 1: YOLI9184WstLlKaNiZNRujR6MyM.crl (hash: cp/WGV6Ae4kko2qJOYHigXNC2JEBzn8WzMMaYgzcRm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:f2:2b:fe:b3:0e:d9:8d:05:c4:03:9c:b9:42:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e2c8f75f385acb4b94a68d899351ba347a3323 Validity Not Before: Dec 18 19:01:46 2025 GMT Not After : Dec 19 19:01:46 2025 GMT Subject: CN=b05bd88c0466b6173485f56715478075a6a55381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5e:eb:14:cb:2d:36:6d:bd:a3:62:1b:be:ec: 88:b6:e8:2f:9d:f7:6b:60:1e:fa:2c:c0:df:9f:ef: 54:ac:50:79:64:23:e5:ae:be:3c:42:87:1a:32:3e: 14:09:83:d6:db:b3:f9:ee:2a:8e:93:98:e2:d0:ef: cd:6c:08:99:45:e1:55:ed:f6:a0:7a:ae:e6:04:b4: 65:8b:38:8f:22:72:72:d6:be:cc:4c:50:2e:60:d6: 2e:31:64:a6:ce:56:e1:81:23:28:95:ca:e4:ba:a2: 02:50:00:01:4d:cf:e9:c5:64:bb:0a:0a:fe:17:8a: 92:98:eb:d6:d3:7e:bb:cd:8a:70:dd:04:0e:bf:41: 7f:64:33:8f:86:d0:2b:27:23:ea:fd:dc:11:4e:b1: 37:c3:6e:5a:94:9e:03:17:4e:99:8f:bf:25:d9:55: 1e:63:46:07:fc:76:ba:a9:f4:f3:3b:53:db:28:08: 73:ae:c7:1d:fb:bd:e7:95:04:01:4d:0b:e0:28:b0: ce:56:a0:1b:bb:08:6c:f8:da:9c:16:23:16:b2:09: 32:d7:b6:6d:0d:18:18:1e:fa:0c:2d:eb:24:80:d8: a6:88:9c:cb:e2:ef:72:87:51:d5:55:b4:b4:fd:c4: 11:30:20:42:68:a8:98:a5:8e:a5:af:91:f7:76:f2: 3a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5B:D8:8C:04:66:B6:17:34:85:F5:67:15:47:80:75:A6:A5:53:81 X509v3 Authority Key Identifier: keyid:60:E2:C8:F7:5F:38:5A:CB:4B:94:A6:8D:89:93:51:BA:34:7A:33:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOLI9184WstLlKaNiZNRujR6MyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/772323-1cde-4b21-a839-4a167b159c88/1/YOLI9184WstLlKaNiZNRujR6MyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:64:04:f3:e1:14:8d:cc:b7:21:ea:3b:91:4b:5e:01:67:26: 66:c8:98:58:eb:55:68:c0:22:e9:e1:ff:b5:4f:2c:ab:64:52: c0:4b:e7:26:25:31:5b:a5:35:ef:fe:92:5e:ca:27:d5:ce:6a: 67:e1:81:c4:2f:0c:9e:f5:0d:1d:97:7e:48:83:09:90:50:7a: ea:4a:9b:23:9f:80:39:16:a2:e6:99:58:19:17:17:da:cf:fe: 9b:6d:9e:91:3f:06:1a:1f:c4:50:48:9e:fe:da:4c:89:ca:62: 43:9f:2b:28:e5:83:c5:1c:f0:4b:5d:70:32:00:b8:1e:9d:1c: 55:0f:ab:0c:dd:51:8c:ad:0c:a8:d8:05:4d:10:4c:88:09:fd: 42:53:bf:09:2c:3d:94:23:75:40:4d:45:2e:f5:02:5b:a2:62: 79:4d:ac:b0:98:a6:fd:97:04:fd:a5:bb:d5:0a:9b:74:e1:a0: 5b:0e:e3:fe:4a:a1:82:2d:38:a2:6a:1e:38:5b:60:53:2c:a6: 5a:04:e1:4f:c6:93:f8:e1:e8:b1:d6:39:8c:aa:d5:aa:7d:98: 6d:f5:76:b6:95:b4:c3:3e:8a:c1:a9:02:b7:1c:4b:7e:1f:71: 2c:45:2c:2f:91:eb:b1:98:03:74:d7:8c:3c:a4:aa:8e:78:d4: 00:52:23:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1vIr/rMO2Y0FxAOcuUKpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZTJjOGY3NWYzODVhY2I0Yjk0YTY4ZDg5OTM1MWJhMzQ3 YTMzMjMwHhcNMjUxMjE4MTkwMTQ2WhcNMjUxMjE5MTkwMTQ2WjAzMTEwLwYDVQQD EyhiMDViZDg4YzA0NjZiNjE3MzQ4NWY1NjcxNTQ3ODA3NWE2YTU1MzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml7rFMstNm29o2IbvuyItugvnfdr YB76LMDfn+9UrFB5ZCPlrr48QocaMj4UCYPW27P57iqOk5ji0O/NbAiZReFV7fag eq7mBLRliziPInJy1r7MTFAuYNYuMWSmzlbhgSMolcrkuqICUAABTc/pxWS7Cgr+ F4qSmOvW0367zYpw3QQOv0F/ZDOPhtArJyPq/dwRTrE3w25alJ4DF06Zj78l2VUe Y0YH/Ha6qfTzO1PbKAhzrscd+73nlQQBTQvgKLDOVqAbuwhs+NqcFiMWsgky17Zt DRgYHvoMLeskgNimiJzL4u9yh1HVVbS0/cQRMCBCaKiYpY6lr5H3dvI63QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBb2IwEZrYXNIX1ZxVHgHWmpVOBMB8GA1UdIwQY MBaAFGDiyPdfOFrLS5SmjYmTUbo0ejMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU9MSTkxODRXc3RMbEthTmlaTlJ1alI2TXlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi83NzIzMjMtMWNkZS00YjIxLWE4Mzkt NGExNjdiMTU5Yzg4LzEvWU9MSTkxODRXc3RMbEthTmlaTlJ1alI2TXlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi83NzIzMjMtMWNkZS00YjIxLWE4MzktNGExNjdiMTU5Yzg4 LzEvWU9MSTkxODRXc3RMbEthTmlaTlJ1alI2TXlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGQE8+EU jcy3Ieo7kUteAWcmZsiYWOtVaMAi6eH/tU8sq2RSwEvnJiUxW6U17/6SXson1c5q Z+GBxC8MnvUNHZd+SIMJkFB66kqbI5+AORai5plYGRcX2s/+m22ekT8GGh/EUEie /tpMicpiQ58rKOWDxRzwS11wMgC4Hp0cVQ+rDN1RjK0MqNgFTRBMiAn9QlO/CSw9 lCN1QE1FLvUCW6JieU2ssJim/ZcE/aW71QqbdOGgWw7j/kqhgi04omoeOFtgUyym WgThT8aT+OHosdY5jKrVqn2YbfV2tpW0wz6KwakCtxxLfh9xLEUsL5HrsZgDdNeM PKSqjnjUAFIjhg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:01:30 2025 by rpki-client